DOUBLE CHABI BASMATI RICE PRIVACY POLICY

1.   Purpose of Collection - We process Personal Data only for lawful purposes including:

·        processing orders;

·        supplying products;

·        managing dealer and distributor relationships;

·        verifying promotional campaigns;

·        customer support;

·        responding to complaints;

·        processing refunds;

·        fraud prevention;

·        internal administration;

·        legal compliance;

·        improving our products and services;

·        business analytics;

·        conducting surveys;

·        maintaining security;

·        enforcing contractual rights.

Where permitted by law, we may also send promotional communications.

2.      Legal Basis for Processing - We process Personal Data on one or more of the following grounds: consent of the Data Principal; performance of a contract; compliance with

legal obligations; employment-related purposes; legitimate uses permitted under applicable law.

3.   Consent - Where consent is required under applicable law, we shall obtain free, specific, informed, unconditional and unambiguous consent before processing Personal Data. The Data Principal may withdraw consent at any time in the manner prescribed by law. Withdrawal of consent shall not affect processing already undertaken before such withdrawal.

8.       Dealer and Business Information - Dealer, distributor and business partner information may be collected for: onboarding; KYC; credit assessment; statutory compliance; business relationship management; logistics; audit purposes; legal proceedings.

9.   Sharing of Information - We do not sell Personal Data. Personal Data may be shared only where necessary with: employees; transporters; logistics companies; payment gateways; banks; technology service providers; cloud service providers; auditors; legal advisors; insurers; government authorities; courts; regulators.

Each recipient shall receive only such information as is reasonably necessary.

10.   Cross-Border Transfer - Where permitted by applicable law, Personal Data may be processed or stored outside India by our service providers, subject to implementation of appropriate contractual and security safeguards.

11.   Data Security - The Company maintains reasonable technical and organizational security measures including:

·        access controls;

·        password protection;

·        encryption where appropriate;

·        firewalls;

·        anti-malware protection;

·        secure servers;

·        audit logs;

·        periodic security reviews;

·        employee confidentiality obligations.

No method of electronic storage is completely secure, and absolute security cannot be guaranteed.

12.   Data Retention - Personal Data shall be retained only for: contractual purposes; legal compliance; taxation; audit; dispute resolution; regulatory obligations.

Upon expiry of the applicable retention period, Personal Data shall be deleted or anonymized unless retention is required by law.

13.     Cookies - Our website may use: essential cookies; analytics cookies; performance cookies; security cookies. Users may modify browser settings to disable cookies. Certain website functions may not operate properly after disabling cookies.

Where required under applicable law, cookie consent shall be obtained before placing non-essential cookies on a user's device. Users may modify or withdraw their consent through available cookie preference settings.

14.   Rights of Data Principals - Subject to applicable law, a Data Principal may:

·        obtain information regarding processing;

·        seek correction of inaccurate information;

·        update personal information;

·        request erasure where legally permissible;

·        withdraw consent;

·        nominate another individual to exercise rights in accordance with applicable law;

·        seek grievance redressal.

15.   Grievance Redressal - Any grievance relating to processing of Personal Data may be submitted to our Grievance Officer. The Company shall endeavour to acknowledge and resolve grievances within the timelines prescribed under applicable law.

16.    Marketing Communications - Promotional emails, SMS, WhatsApp messages or other marketing communications shall be sent only where permitted under applicable law.

Recipients may opt out of such communications at any time. Operational communications relating to orders, invoices and legal notices may continue to be sent notwithstanding such opt-out.

17.    Third-Party Websites - Our website may contain links to third-party websites. The Company has no control over such websites and is not responsible for their privacy practices or content. Users should review the privacy policies of such third-party websites before providing Personal Data.

18.   Data Accuracy - Users are responsible for ensuring that the Personal Data provided is accurate, complete and up to date. The Company shall not be liable for losses arising from inaccurate information supplied by users.

19.   Data Breach - In the event of a Personal Data breach requiring notification under applicable law, the Company shall take appropriate remedial measures and comply with applicable statutory reporting obligations.

20.       Automated Decision-Making - The Company does not presently undertake automated decision-making or profiling that produces legal or similarly significant effects. Should such processing commence, appropriate notice shall be provided where required by law.